This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json) Hash identifier: xnj+lGq1+1NucAuSQFIpnFSNtd2wanA8wskk0fbQxlE= Subject key identifier: 7D:BD:52:86:F1:4C:6F:98:A5:8C:BB:C2:4E:83:36:26:89:A5:21:3B Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Certificate serial: 019AF1D200B0DCF7A38311AB8BFBBD5F09F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft Manifest number: 0A03 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=) 2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: w2dowZIVQcdQXrgczHvKeptFTqECpIbRQYmkB/HQNaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:00:b0:dc:f7:a3:83:11:ab:8b:fb:bd:5f:09:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=7dbd5286f14c6f98a58cbbc24e83362689a5213b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:29:62:70:e7:38:af:f8:02:ab:00:7e:f7: 8b:88:fb:77:32:0a:9c:c8:7b:9d:07:9a:df:af:8a: 6a:88:00:30:dd:1c:14:83:18:ac:aa:2c:33:a7:e1: 64:84:29:cc:db:cf:b4:a5:c5:b5:82:2b:86:5f:85: 64:a6:ec:c1:fd:9d:af:74:f6:fd:4d:b6:b2:b7:5e: 85:12:ff:27:95:57:99:2f:c5:37:1f:bc:03:3b:f6: 47:31:66:7c:bc:79:a9:56:a5:6d:cf:6b:e4:4e:2b: 2c:55:7b:8b:b7:a6:e8:49:5e:bb:3a:17:7f:4c:b0: a3:11:10:aa:be:3e:5b:3a:79:49:5d:47:fb:cf:08: 01:30:d1:e0:ea:ef:0b:69:25:8d:ab:e5:ee:2d:06: a6:12:6d:32:73:3e:0f:d1:5e:24:59:ac:4f:96:55: a6:d6:de:1e:e9:db:d5:db:90:b8:25:da:7f:30:ec: 27:e1:73:6e:26:23:e0:9a:24:11:06:fd:ec:9f:be: 39:a2:51:2b:71:ae:10:1b:cc:7a:2a:93:a4:b7:93: e1:d9:da:0c:50:fa:4e:0a:1d:5e:f9:fb:27:a2:5e: b3:c3:2f:e6:98:ab:3d:3f:b5:47:fd:53:a7:02:dd: 08:01:4b:b8:9e:e9:b2:42:2f:67:92:a7:8d:a5:c2: 05:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BD:52:86:F1:4C:6F:98:A5:8C:BB:C2:4E:83:36:26:89:A5:21:3B X509v3 Authority Key Identifier: keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:af:de:88:cd:84:07:d4:f9:d0:01:e1:a7:44:e8:a6:60:8d: 8b:e2:56:ed:fc:45:57:69:27:8e:3a:c5:79:b1:c1:84:b7:aa: ed:e0:39:5d:be:51:1b:f0:6e:36:65:57:1e:5d:10:79:16:72: 19:7e:90:80:07:40:56:a1:c0:71:80:c4:7b:ef:83:21:c7:ae: cb:cf:64:6a:8d:a7:10:49:05:3d:2d:1e:99:93:7d:b3:df:77: ca:b7:19:04:21:1a:56:80:ac:f6:15:62:8b:64:63:98:06:2e: c4:e7:23:a9:9e:25:71:c8:41:01:82:9d:c5:9c:5b:6f:ee:5a: 9d:f6:8d:02:f0:bd:2f:34:71:ae:a5:1a:5c:d9:f4:43:bf:60: cb:87:6c:7d:75:bb:aa:b4:c2:b3:a4:b1:98:66:f3:c2:c8:ed: 79:7f:63:a6:91:7d:68:f2:f4:cf:a2:9e:02:6c:6d:55:b5:34: 65:18:0b:39:ec:c6:43:37:e3:6a:47:a4:28:fa:0b:9d:ed:11: 04:cc:18:f3:7f:ff:ad:c1:f6:ac:2e:38:ec:99:90:5e:18:1f: 81:88:86:2d:8a:65:74:79:81:8a:05:3e:ba:f1:27:c8:fb:9d: e1:b4:d1:44:d2:f2:7f:7d:fc:df:b4:9e:59:b9:34:d6:96:ae: d0:e2:db:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gCw3PejgxGri/u9Xwn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2 OTJhZTAwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg3ZGJkNTI4NmYxNGM2Zjk4YTU4Y2JiYzI0ZTgzMzYyNjg5YTUyMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16spYnDnOK/4AqsAfveLiPt3Mgqc yHudB5rfr4pqiAAw3RwUgxisqiwzp+FkhCnM28+0pcW1giuGX4VkpuzB/Z2vdPb9 Tbayt16FEv8nlVeZL8U3H7wDO/ZHMWZ8vHmpVqVtz2vkTissVXuLt6boSV67Ohd/ TLCjERCqvj5bOnlJXUf7zwgBMNHg6u8LaSWNq+XuLQamEm0ycz4P0V4kWaxPllWm 1t4e6dvV25C4Jdp/MOwn4XNuJiPgmiQRBv3sn745olErca4QG8x6KpOkt5Ph2doM UPpOCh1e+fsnol6zwy/mmKs9P7VH/VOnAt0IAUu4numyQi9nkqeNpcIFiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH29UobxTG+YpYy7wk6DNiaJpSE7MB8GA1UdIwQY MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt MGU0N2VkZTMwNWIzLzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuq/eiM2E B9T50AHhp0TopmCNi+JW7fxFV2knjjrFebHBhLeq7eA5Xb5RG/BuNmVXHl0QeRZy GX6QgAdAVqHAcYDEe++DIceuy89kao2nEEkFPS0emZN9s993yrcZBCEaVoCs9hVi i2RjmAYuxOcjqZ4lcchBAYKdxZxbb+5anfaNAvC9LzRxrqUaXNn0Q79gy4dsfXW7 qrTCs6SxmGbzwsjteX9jppF9aPL0z6KeAmxtVbU0ZRgLOezGQzfjakekKPoLne0R BMwY83//rcH2rC447JmQXhgfgYiGLYpldHmBigU+uvEnyPud4bTRRNLyf33837Se Wbk01pau0OLbSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:10 2025 by rpki-client